Data Processing Addendum

This Data Processing Addendum (DPA) describes how LedgerGuard processes personal data on behalf of customers when they use the service. It is intended for procurement and privacy teams; it supplements our Terms of Service and Privacy Policy.

Last updated: April 21, 2026

Scope and roles

When your organization uses LedgerGuard, LedgerGuard generally acts as a processor (or sub-processor, as defined in your agreements) for personal data you submit to the product—for example account details, workspace membership, and contract-related content you choose to upload.

You remain responsible for the lawfulness of processing and for instructions you give your users regarding their data. LedgerGuard processes such data only to provide and secure the service, as described in our agreements and documentation.

Security and subprocessors

We implement technical and organizational measures appropriate to the risk, including tenant-scoped access controls and audit logging for sensitive product actions. Infrastructure and service providers we use are summarized on our Subprocessors page.

International transfers

Data may be processed in the regions and providers described in your order or deployment documentation. Where Standard Contractual Clauses or other transfer mechanisms apply, they are made available as part of enterprise agreements when required.

Questions

For a countersigned DPA, transfer impact details, or subprocessors in your deployment, contact support or your account contact.